Detection layer: Camera
Only visible through the security camera.
Camera anomalies punish teams that trust the window view too quickly. Use the security feed before admission and switch to the lobby camera when a side view makes the clue easier to see.
Some camera signs are visible for only a moment or change after reopening the feed. If the camera view contradicts the window view, treat the camera as the stronger warning.